Re: bayes: cannot open bayes databases lock failed: File exists

2018-04-06 Thread Pedro David Marco
 
>under such load, yes.
>if you use per-site bayes database, you can try redis - even faster than>mysql.
Much much much faster
PedroD
  

Re: bayes: cannot open bayes databases lock failed: File exists

2018-04-06 Thread Matus UHLAR - fantomas

On 06.04.18 15:47, Emanuel wrote:

randomly I see these errors

Apr  6 15:13:29 server spamd[25456]: bayes: cannot open bayes 
databases /.spamassassin/bayes_* R/W: lock failed: File exists
Apr  6 15:13:29 server spamd[25144]: bayes: cannot open bayes 
databases /.spamassassin/bayes_* R/W: lock failed: File exists
Apr  6 15:13:29 server spamd[25286]: bayes: cannot open bayes 
databases /.spamassassin/bayes_* R/W: lock failed: File exists
Apr  6 15:13:29 server spamd[25408]: bayes: cannot open bayes 
databases /.spamassassin/bayes_* R/W: lock failed: File exists
Apr  6 15:13:29 server spamd[25459]: bayes: cannot open bayes 
databases /.spamassassin/bayes_* R/W: lock failed: File exists
Apr  6 15:13:29 server spamd[25416]: bayes: cannot open bayes 
databases /.spamassassin/bayes_* R/W: lock failed: File exists


-rw--- 1 nobody nobody   6446360 abr  6 15:14 
/.spamassassin/bayes_journal

-rw--- 1 nobody nobody 732913664 abr  6 15:06 /.spamassassin/bayes_seen
-rw--- 1 nobody nobody  78856192 abr  6 15:09 /.spamassassin/bayes_toks

the permissions of the files are correct

I had thought to import the database of bayes to mysql, is it 
recommended? approximately 30,000 emails are analyzed per hour.


under such load, yes.
if you use per-site bayes database, you can try redis - even faster than
mysql.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"Where do you want to go to die?" [Microsoft]


bayes: cannot open bayes databases lock failed: File exists

2018-04-06 Thread Emanuel

Hello,

randomly I see these errors

Apr  6 15:13:29 server spamd[25456]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists
Apr  6 15:13:29 server spamd[25144]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists
Apr  6 15:13:29 server spamd[25286]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists
Apr  6 15:13:29 server spamd[25408]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists
Apr  6 15:13:29 server spamd[25459]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists
Apr  6 15:13:29 server spamd[25416]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists


-rw--- 1 nobody nobody   6446360 abr  6 15:14 
/.spamassassin/bayes_journal

-rw--- 1 nobody nobody 732913664 abr  6 15:06 /.spamassassin/bayes_seen
-rw--- 1 nobody nobody  78856192 abr  6 15:09 /.spamassassin/bayes_toks

the permissions of the files are correct

I had thought to import the database of bayes to mysql, is it 
recommended? approximately 30,000 emails are analyzed per hour.


any ideas?

Regards,

--



Re: how to remove T_RP_MATCHES_RCVD

2018-04-06 Thread John Hardin

On Fri, 6 Apr 2018, Matus UHLAR - fantomas wrote:


On Thu, 5 Apr 2018, Motty Cruz wrote:
Hello, T_RP_MATCHES_RCVD  this rule is allowing spammy emails past 
through. Is there a way to disable in local.cf?


simply put:

score   RP_MATCHES_RCVD 0
score   T_RP_MATCHES_RCVD   0

in case of anyone will try pushing any of these to SA.

On 05.04.18 09:32, John Hardin wrote:
The best way to disable it without breaking any meta-rules that may be 
using it is to set its score to 0.001 in your local config file.


meta rules are supposed to use __RP_MATCHES_RCVD - this is what
__RP_MATCHES_RCVD is for.

using T_RP_MATCHES_RCVD in meta rules should be considered a bug.


Correct, however that doesn't mean someone hasn't done so locally.


It's also useless duplicate of __RP_MATCHES_RCVD

header   T_RP_MATCHES_RCVD  eval:check_mailfrom_matches_rcvd()
header  __RP_MATCHES_RCVD  eval:check_mailfrom_matches_rcvd()


Yeah. I noticed that too but didn't clean it up. If somebody else doesn't 
by this weekend I probably will.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  [For Earth Day] Obama flew a 747 all the way to the Everglades
  then rode in a massive SUV motorcade to tell you
  to cut carbon emissions.-- Twitter satirist @hale_razor
---
 7 days until Thomas Jefferson's 275th Birthday

Problems with SORBS?

2018-04-06 Thread Martin Gregorie
I'm getting a lot of SORBS lookups rejected due to an "unexpected
RCODE". Is anybody else seeing these?

I'm running BIND 9.11.3-RedHat-9.11.3-2.fc27


Martin



Re: how to remove T_RP_MATCHES_RCVD

2018-04-06 Thread Matus UHLAR - fantomas

On Thu, 5 Apr 2018, Motty Cruz wrote:
Hello, T_RP_MATCHES_RCVD  this rule is allowing spammy emails past 
through. Is there a way to disable in local.cf?


simply put:

score   RP_MATCHES_RCVD 0
score   T_RP_MATCHES_RCVD   0

in case of anyone will try pushing any of these to SA.

On 05.04.18 09:32, John Hardin wrote:
The best way to disable it without breaking any meta-rules that may 
be using it is to set its score to 0.001 in your local config file.


meta rules are supposed to use __RP_MATCHES_RCVD - this is what
__RP_MATCHES_RCVD is for.

using T_RP_MATCHES_RCVD in meta rules should be considered a bug.

It's also useless duplicate of __RP_MATCHES_RCVD

header   T_RP_MATCHES_RCVD  eval:check_mailfrom_matches_rcvd()
header  __RP_MATCHES_RCVD  eval:check_mailfrom_matches_rcvd()



I really wonder that after multiple complaints of RP_MATCHES_RCVD someone
dared push it to rulesets again.

just a simple search:

https://lists.gt.net/spamassassin/users/166185
http://spamassassin.1065346.n5.nabble.com/RP-MATCHES-RCVD-td111557.html
http://spamassassin.1065346.n5.nabble.com/RP-MATCHES-RCVD-td107111.html
https://serverfault.com/questions/628398/spamassassin-filter-systematically-produces-negative-ham-scores-for-spam-messa

I don't see a score for it in the latest rules update, so it should 
by default be *adding* one point to scores, which won't contribute to 
FNs.


It could to contribute to FPs in such case.

I believe this hasn't been true in the past, since I have already disabled
this on some of systems we maintain in our company.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"The box said 'Requires Windows 95 or better', so I bought a Macintosh".